STIGQter: STIG Summary: HPE Aruba Networking AOS Wireless Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

AOS must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.

DISA Rule

SV-266591r1040263_rule

Vulnerability Number

V-266591

Group Title

SRG-NET-000193

Rule Version

ARBA-NT-000440

Severity

CAT II

CCI(s)

• CCI-001095 - Manage capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.

Weight

10

Fix Recommendation

Configure AOS using the web interface:

Navigate to Configuration >> Services >> Firewall and enable DoS protection in accordance with organization-defined policy.

Click Submit >> Pending Changes >> Deploy Changes.

Check Contents

Verify the AOS configuration using the web interface:

Navigate to Configuration >> Services >> Firewall.

If the organization-defined safeguards are not enabled to protect against known DoS attacks, this is a finding.

Vulnerability Number

V-266591

Documentable

False

Rule Version

ARBA-NT-000440

Severity Override Guidance

Verify the AOS configuration using the web interface:

Navigate to Configuration >> Services >> Firewall.

If the organization-defined safeguards are not enabled to protect against known DoS attacks, this is a finding.

Check Content Reference

M

Target Key

5646